Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa
File:                     1f32da3b-35e2-37b1-b145-ebe50a806536.roa (raw, json)
Hash identifier:          N1H4IttN7adJFmgdtY5gOnNl1f8P4uooS/SSh9Wd4k8=
Subject key identifier:   FB:6B:34:E2:E1:E2:5C:DB:BF:E7:A2:28:82:13:9B:06:CF:E8:EB:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE15096CC2A22369F5CD22440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1408:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:96:cc:2a:22:36:9f:5c:d2:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=d2a8179c-432c-416b-885c-d90bb4dd24ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:a3:dd:89:5f:fc:7f:3c:f2:78:df:22:a1:
                    79:f1:75:dc:fe:74:2e:12:8f:7c:4b:3b:12:ef:ba:
                    2e:ba:e6:98:b4:05:21:10:a2:cd:37:b8:b9:20:3e:
                    a7:aa:5a:37:48:80:86:fb:ff:76:bd:7e:e0:10:39:
                    fc:b1:69:76:6f:eb:b8:7e:23:96:d6:9f:87:82:9d:
                    c7:81:20:c1:80:a0:48:18:6e:a6:44:a3:51:fb:7e:
                    0e:ad:da:3f:73:13:c4:0c:68:3a:e0:f1:74:8a:7a:
                    b4:15:80:f7:80:e9:55:b5:7d:20:f9:a3:a0:8c:a9:
                    70:8f:9c:0a:93:67:88:c4:a0:61:05:71:ff:ca:43:
                    ed:97:9f:ec:67:07:25:62:04:b3:b0:28:6b:39:8a:
                    ff:4e:0d:97:52:b9:cf:c5:cf:ab:4a:72:2d:a2:53:
                    72:1e:e9:2c:38:7d:84:00:9c:54:7a:a7:8f:4b:42:
                    83:83:8c:de:3c:18:8a:8b:cc:b5:2c:dd:17:a4:28:
                    f1:ac:91:f5:fb:11:2d:a7:2f:5e:6a:ca:43:c8:2d:
                    df:27:c0:33:15:87:b2:37:70:bd:ae:14:cd:5a:c3:
                    1c:87:23:43:f1:3c:e7:54:4d:dc:6f:eb:b7:b3:9f:
                    02:30:78:46:2f:30:66:e0:aa:e9:14:ff:b7:ba:b4:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:34:E2:E1:E2:5C:DB:BF:E7:A2:28:82:13:9B:06:CF:E8:EB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:01:dc:f1:43:71:b0:b3:0f:23:b9:94:b9:7d:4e:f7:68:18:
         1a:06:d0:f3:cc:32:c2:57:6f:1f:50:dd:dd:0b:06:a9:e8:22:
         ae:49:c6:32:ad:e2:92:8a:98:42:55:a5:02:b6:a4:25:9a:1d:
         eb:39:0c:14:76:a8:81:ca:4f:8a:93:1d:a8:a0:18:38:19:ac:
         4e:25:ef:3a:96:f0:25:3e:96:5c:a5:2a:3a:05:cc:53:b2:31:
         de:0f:85:39:39:4c:5e:31:ca:6f:61:3f:c5:95:03:22:e2:1f:
         94:2e:7b:48:3d:1f:d8:bb:aa:dd:4b:56:6e:53:bc:84:2c:39:
         5c:43:cf:4b:4d:a8:78:4a:05:f1:f2:52:e2:50:85:89:bc:5a:
         e3:35:78:3a:86:74:e4:b8:a8:5e:69:e4:c8:1a:90:c3:04:f7:
         91:01:0c:70:ad:e3:9c:1a:14:44:33:35:eb:69:57:72:4b:02:
         c6:60:f8:34:28:57:74:83:c7:02:e3:c0:93:ae:80:ba:c2:4d:
         7d:89:67:ee:6d:6b:a5:d8:71:13:8c:bf:fa:bb:ee:7d:21:93:
         42:f4:5e:6b:53:b9:e2:4c:71:ba:b1:b0:50:ae:6f:b5:d8:32:
         f9:1f:e2:b0:8e:f2:40:17:de:d1:43:18:e3:52:cd:58:40:53:
         2b:fc:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:48 2026 by rpki-client